@europeum-ebsi/cli 0.0.0

package/dist/scripts/issueVcTI

@@ -0,0 +1,12 @@
+# way of use:
+# ==> run issueVcTI <didSubject>
+
+reservedAttributeId: compute randomID
+payloadVcTI: load assets/vcdm1.1/VerifiableAccreditationToAttest.json
+set payloadVcTI.issuer user.did
+set payloadVcTI.credentialSubject.id $1
+set payloadVcTI.credentialSubject.accreditedFor.0.schemaId tsrUrl /schemas/zH74MKkYTbQ6ZfTxufi6A3Aw8giS4piGm8dpgxFmkJjmu
+set payloadVcTI.termsOfUse.id user.accreditationUrl
+set payloadVcTI.credentialSchema.id tsrUrl /schemas/zHXHLkJpZg4w9nt2GbEBbyE8uhkfirbmT3nF7mJ9kFnjv
+set payloadVcTI.credentialSubject.reservedAttributeId reservedAttributeId
+compute createVcJwt payloadVcTI {} ES256 1.1

package/dist/scripts/issueVcTnl

@@ -0,0 +1,32 @@
+payloadVcTnl: load assets/vcdm1.1/TrustedNodesList.json
+set payloadVcTnl.credentialSubject.id SET_SERVICE_OPS_MANAGER
+
+# environment: test, pilot, preprod, or prod
+set payloadVcTnl.credentialSubject.environment SET_ENV
+
+# chainId
+# test: 6175
+# pilot: 6179
+set payloadVcTnl.credentialSubject.chainId SET_CHAIN_ID
+
+# version
+set payloadVcTnl.credentialSubject.version SET_TNL_VERSION
+
+# Load nodes
+nodes: load assets/Nodes.json
+
+# Check the status
+resultHealth: tnl healthNodes nodes
+nodesTotal: compute length resultHealth.nodesOk
+set payloadVcTnl.credentialSubject.nodesTotal nodesTotal
+set payloadVcTnl.credentialSubject.nodes resultHealth.nodesOk
+
+# Other updates
+set payloadVcTnl.termsOfUse.id user.accreditationUrl
+set payloadVcTnl.credentialSchema.id ebsi: payloadVcTnl.credentialSubject.environment :trusted-schemas-registry:/schemas/zH74MKkYTbQ6ZfTxufi6A3Aw8giS4piGm8dpgxFmkJjmu
+
+# Issue the credential
+vcTnl: compute createVcJwt payloadVcTnl {} ES256 1.1
+
+view resultHealth
+# pass the VC to the Service Ops Manager (see verifyVcTnl)

package/dist/scripts/issue_CTRevocableCredential

@@ -0,0 +1,12 @@
+# way of use:
+# ==> run issue_CTRevocableCredential <didIssuer> <didSubject> <issuerAttributeIdUrl> <issuerProxyId> <statusIndex> <statusListIndex>
+
+payloadCTRevocableCredential: load assets/vcdm1.1/CTRevocableCredential.json
+set payloadCTRevocableCredential.issuer $1
+set payloadCTRevocableCredential.credentialSubject.id $2
+set payloadCTRevocableCredential.termsOfUse.id $3
+set payloadCTRevocableCredential.credentialSchema.id tsrUrl /schemas/zH74MKkYTbQ6ZfTxufi6A3Aw8giS4piGm8dpgxFmkJjmu
+set payloadCTRevocableCredential.credentialStatus.id tirUrl /issuers/ user.did /proxies/ $4 /credentials/status/ $5
+set payloadCTRevocableCredential.credentialStatus.statusListIndex $6
+set payloadCTRevocableCredential.credentialStatus.statusListCredential tirUrl /issuers/ user.did /proxies/ $4 /credentials/status/ $5
+compute createVcJwt payloadCTRevocableCredential {} ES256 1.1

package/dist/scripts/issue_SelfAttestationSupportOffice

@@ -0,0 +1,10 @@
+# way of use:
+# ==> run issue_SelfAttestationSupportOffice <didIssuer> <reservedAttributeId>
+
+payloadVc: load assets/vcdm1.1/CredentialToAttestVerifiableAuthorisationForTrustChain.json
+set payloadVc.issuer $1
+set payloadVc.credentialSubject.id $1
+set payloadVc.credentialSubject.accreditedFor[0].schemaId tsrUrl /schemas/zH74MKkYTbQ6ZfTxufi6A3Aw8giS4piGm8dpgxFmkJjmu
+set payloadVc.credentialSchema.id tsrUrl /schemas/zH74MKkYTbQ6ZfTxufi6A3Aw8giS4piGm8dpgxFmkJjmu
+set payloadVc.credentialSubject.reservedAttributeId $2
+compute createVcJwt payloadVc {} ES256 1.1

package/dist/scripts/issue_VerifiableAccreditationToAccredit

@@ -0,0 +1,11 @@
+# way of use:
+# ==> run issue_VerifiableAccreditationToAccredit <didIssuer> <didSubject> <issuerAttributeIdUrl> <reservedAttributeId>
+
+payloadVcTAO: load assets/vcdm1.1/VerifiableAccreditationToAccredit.json
+set payloadVcTAO.issuer $1
+set payloadVcTAO.credentialSubject.id $2
+set payloadVcTAO.credentialSubject.accreditedFor.0.schemaId tsrUrl /schemas/zH74MKkYTbQ6ZfTxufi6A3Aw8giS4piGm8dpgxFmkJjmu
+set payloadVcTAO.termsOfUse.0.id $3
+set payloadVcTAO.credentialSchema.id tsrUrl /schemas/zHXHLkJpZg4w9nt2GbEBbyE8uhkfirbmT3nF7mJ9kFnjv
+set payloadVcTAO.credentialSubject.reservedAttributeId $4
+compute createVcJwt payloadVcTAO {} ES256 1.1

package/dist/scripts/issue_VerifiableAccreditationToAttest

@@ -0,0 +1,11 @@
+# way of use:
+# ==> run issue_VerifiableAccreditationToAttest <didIssuer> <didSubject> <issuerAttributeIdUrl> <reservedAttributeId>
+
+payloadVcTI: load assets/vcdm1.1/VerifiableAccreditationToAttest.json
+set payloadVcTI.issuer $1
+set payloadVcTI.credentialSubject.id $2
+set payloadVcTI.credentialSubject.accreditedFor.0.schemaId tsrUrl /schemas/zH74MKkYTbQ6ZfTxufi6A3Aw8giS4piGm8dpgxFmkJjmu
+set payloadVcTI.termsOfUse.id $3
+set payloadVcTI.credentialSchema.id tsrUrl /schemas/zHXHLkJpZg4w9nt2GbEBbyE8uhkfirbmT3nF7mJ9kFnjv
+set payloadVcTI.credentialSubject.reservedAttributeId $4
+compute createVcJwt payloadVcTI {} ES256 1.1

package/dist/scripts/issue_VerifiableAuthorisationForTrustChain

@@ -0,0 +1,10 @@
+# way of use:
+# ==> run issue_VerifiableAuthorisationForTrustChain <didIssuer> <didSubject> <issuerAttributeIdUrl> <reservedAttributeId>
+
+payloadVcRootTAO: load assets/vcdm1.1/VerifiableAuthorisationForTrustChain.json
+set payloadVcRootTAO.issuer $1
+set payloadVcRootTAO.credentialSubject.id $2
+set payloadVcRootTAO.termsOfUse.id $3
+set payloadVcRootTAO.credentialSchema.id tsrUrl /schemas/zH74MKkYTbQ6ZfTxufi6A3Aw8giS4piGm8dpgxFmkJjmu
+set payloadVcRootTAO.credentialSubject.reservedAttributeId $4
+compute createVcJwt payloadVcRootTAO {} ES256 1.1

package/dist/scripts/issue_VerifiableAuthorisationToOnboard

@@ -0,0 +1,9 @@
+# way of use:
+# ==> run issue_VerifiableAuthorisationToOnboard <didIssuer> <didSubject> <issuerAttributeIdUrl>
+
+payloadVcOnboard: load assets/vcdm1.1/VerifiableAuthorisationToOnboard.json
+set payloadVcOnboard.issuer $1
+set payloadVcOnboard.credentialSubject.id $2
+set payloadVcOnboard.termsOfUse.id $3
+set payloadVcOnboard.credentialSchema.id tsrUrl /schemas/zH74MKkYTbQ6ZfTxufi6A3Aw8giS4piGm8dpgxFmkJjmu
+compute createVcJwt payloadVcOnboard {} ES256 1.1

package/dist/scripts/preregisterIssuer

@@ -0,0 +1,6 @@
+# ==> run preregisterIssuer <didSubject> <issuerType> <vc>
+jwtDecoded: compute decodeJWT $3
+set reservedAttributeId jwtDecoded.payload.vc.credentialSubject.reservedAttributeId
+resAuthTIR: authorisation auth tir_write_presentation ES256 [] 1.1
+using token resAuthTIR.access_token
+tir setAttributeMetadata $1 reservedAttributeId $2 user.did user.accreditationId

package/dist/scripts/registerDidDocument

@@ -0,0 +1,15 @@
+# register first part of DID document
+resAuthDIDRInvite: authorisation auth didr_invite_presentation ES256 $1 1.1
+using token resAuthDIDRInvite.access_token
+
+did insertDidDocument
+compute wait 5
+
+# complete DID document
+resAuthDIDRWrite: authorisation auth didr_write_presentation ES256K [] 1.1
+using token resAuthDIDRWrite.access_token
+
+did addVerificationMethod user.did ES256
+compute wait 5
+did addVerificationRelationship user.did authentication ES256
+did addVerificationRelationship user.did assertionMethod ES256

package/dist/scripts/registerIssuer

@@ -0,0 +1,6 @@
+# ==> run registerIssuer <vc>
+jwtDecoded: compute decodeJWT $1
+set reservedAttributeId jwtDecoded.payload.vc.credentialSubject.reservedAttributeId
+resAuthTIR: authorisation auth tir_invite_presentation ES256 $1
+using token resAuthTIR.access_token
+tir setAttributeData user.did reservedAttributeId $1

package/dist/scripts/updateVcRootTAO

@@ -0,0 +1,10 @@
+# way of use:
+# ==> run issueVcRootTAO <didSubject> <reservedAttributeId>
+
+payloadVcRootTAO: load assets/vcdm1.1/VerifiableAuthorisationForTrustChain.json
+set payloadVcRootTAO.issuer user.did
+set payloadVcRootTAO.credentialSubject.id $1
+set payloadVcRootTAO.termsOfUse.id user.accreditationUrl
+set payloadVcRootTAO.credentialSchema.id tsrUrl /schemas/zH74MKkYTbQ6ZfTxufi6A3Aw8giS4piGm8dpgxFmkJjmu
+set payloadVcRootTAO.credentialSubject.reservedAttributeId $2
+compute createVcJwt payloadVcRootTAO {} ES256 1.1

package/dist/scripts/updateVcTAO

@@ -0,0 +1,11 @@
+# way of use:
+# ==> run issueVcTAO <didSubject> <reservedAttributeId>
+
+payloadVcTAO: load assets/vcdm1.1/VerifiableAccreditationToAccredit.json
+set payloadVcTAO.issuer user.did
+set payloadVcTAO.credentialSubject.id $1
+set payloadVcTAO.credentialSubject.accreditedFor.0.schemaId tsrUrl /schemas/zH74MKkYTbQ6ZfTxufi6A3Aw8giS4piGm8dpgxFmkJjmu
+set payloadVcTAO.termsOfUse.0.id user.accreditationUrl
+set payloadVcTAO.credentialSchema.id tsrUrl /schemas/zHXHLkJpZg4w9nt2GbEBbyE8uhkfirbmT3nF7mJ9kFnjv
+set payloadVcTAO.credentialSubject.reservedAttributeId $2
+compute createVcJwt payloadVcTAO {} ES256 1.1

package/dist/scripts/updateVcTI

@@ -0,0 +1,11 @@
+# way of use:
+# ==> run issueVcTI <didSubject> <reservedAttributeId>
+
+payloadVcTI: load assets/vcdm1.1/VerifiableAccreditationToAttest.json
+set payloadVcTI.issuer user.did
+set payloadVcTI.credentialSubject.id $1
+set payloadVcTI.credentialSubject.accreditedFor.0.schemaId tsrUrl /schemas/zH74MKkYTbQ6ZfTxufi6A3Aw8giS4piGm8dpgxFmkJjmu
+set payloadVcTI.termsOfUse.id user.accreditationUrl
+set payloadVcTI.credentialSchema.id tsrUrl /schemas/zHXHLkJpZg4w9nt2GbEBbyE8uhkfirbmT3nF7mJ9kFnjv
+set payloadVcTI.credentialSubject.reservedAttributeId $2
+compute createVcJwt payloadVcTI {} ES256 1.1

package/dist/scripts/vcdm2.0/issueSelfAttestationSupportOffice

@@ -0,0 +1,10 @@
+# way of use:
+# ==> run issue_SelfAttestationSupportOffice <didIssuer> <reservedAttributeId>
+
+payloadVc: load assets/vcdm2.0/CredentialToAttestVerifiableAuthorisationForTrustChain.json
+set payloadVc.issuer $1
+set payloadVc.credentialSubject.id $1
+set payloadVc.credentialSubject.permissionFor[0].schemaId tsrUrl /schemas/zB5yLy7GXdZs1iaJ7wN2K5mhwZDTxjECM2fELYE73mu3E
+set payloadVc.credentialSchema.id tsrUrl /schemas/zB5yLy7GXdZs1iaJ7wN2K5mhwZDTxjECM2fELYE73mu3E
+set payloadVc.credentialSubject.reservedAttributeId $2
+compute createVcJwt payloadVc {} ES256 2.0

package/dist/scripts/vcdm2.0/issueVcInvoke

@@ -0,0 +1,12 @@
+# way of use:
+# ==> run issueVcInvoke <didSubject> <address>
+
+rootAuthorisationFromAccreditation: tir getRootAuthorisation user.accreditationUrl
+payloadVcInvoke: load assets/vcdm2.0/VerifiableAuthorisationToInvoke.json
+set payloadVcInvoke.issuer user.did
+set payloadVcInvoke.credentialSubject.id $1
+set payloadVcInvoke.credentialSubject.contractAddress $2
+set payloadVcInvoke.termsOfUse.parentAccreditation user.accreditationUrl
+set payloadVcInvoke.termsOfUse.rootAuthorisation rootAuthorisationFromAccreditation
+set payloadVcInvoke.credentialSchema.id tsrUrl /schemas/zB5yLy7GXdZs1iaJ7wN2K5mhwZDTxjECM2fELYE73mu3E
+compute createVcJwt payloadVcInvoke {} ES256 2.0

package/dist/scripts/vcdm2.0/issueVcOnboard

@@ -0,0 +1,11 @@
+# way of use:
+# ==> run issueVcOnboard <didSubject>
+
+rootAuthorisationFromAccreditation: tir getRootAuthorisation user.accreditationUrl
+payloadVcOnboard: load assets/vcdm2.0/VerifiableAuthorisationToOnboard.json
+set payloadVcOnboard.issuer user.did
+set payloadVcOnboard.credentialSubject.id $1
+set payloadVcOnboard.termsOfUse.parentAccreditation user.accreditationUrl
+set payloadVcOnboard.termsOfUse.rootAuthorisation rootAuthorisationFromAccreditation
+set payloadVcOnboard.credentialSchema.id tsrUrl /schemas/zB5yLy7GXdZs1iaJ7wN2K5mhwZDTxjECM2fELYE73mu3E
+compute createVcJwt payloadVcOnboard {} ES256 2.0

package/dist/scripts/vcdm2.0/issueVcRootTAO

@@ -0,0 +1,14 @@
+# way of use:
+# ==> run issueVcRootTAO <didSubject> <trustFramework> <policyId> <legalBasis>
+
+reservedAttributeId: compute randomID
+payloadVcRootTAO: load assets/vcdm2.0/VerifiableAuthorisationForTrustChain.json
+set payloadVcRootTAO.issuer user.did
+set payloadVcRootTAO.credentialSubject.id $1
+set payloadVcRootTAO.termsOfUse.trustFramework $2
+set payloadVcRootTAO.termsOfUse.policyId $3
+set payloadVcRootTAO.termsOfUse.legalBasis $4
+set payloadVcRootTAO.credentialSchema.id tsrUrl /schemas/zB5yLy7GXdZs1iaJ7wN2K5mhwZDTxjECM2fELYE73mu3E
+set payloadVcRootTAO.credentialStatus.id tirUrl /issuers/ $1 /attributes/ reservedAttributeId
+set payloadVcRootTAO.credentialSubject.reservedAttributeId reservedAttributeId
+compute createVcJwt payloadVcRootTAO {} ES256 2.0

package/dist/scripts/vcdm2.0/issueVcTAO

@@ -0,0 +1,15 @@
+# way of use:
+# ==> run issueVcTAO <didSubject>
+
+rootAuthorisationFromAccreditation: tir getRootAuthorisation user.accreditationUrl
+reservedAttributeId: compute randomID
+payloadVcTAO: load assets/vcdm2.0/VerifiableAccreditationToAccredit.json
+set payloadVcTAO.issuer user.did
+set payloadVcTAO.credentialSubject.id $1
+set payloadVcTAO.credentialSubject.permissionFor.0.schemaId tsrUrl /schemas/zB5yLy7GXdZs1iaJ7wN2K5mhwZDTxjECM2fELYE73mu3E
+set payloadVcTAO.termsOfUse.0.parentAccreditation user.accreditationUrl
+set payloadVcTAO.termsOfUse.0.rootAuthorisation rootAuthorisationFromAccreditation
+set payloadVcTAO.credentialSchema.id tsrUrl /schemas/z2DzoeZrgduRwk3y4RAetwSHRZAHAqNF6fWWMaEcZUdAY
+set payloadVcTAO.credentialStatus.id tirUrl /issuers/ $1 /attributes/ reservedAttributeId
+set payloadVcTAO.credentialSubject.reservedAttributeId reservedAttributeId
+compute createVcJwt payloadVcTAO {} ES256 2.0

package/dist/scripts/vcdm2.0/issueVcTI

@@ -0,0 +1,15 @@
+# way of use:
+# ==> run issueVcTI <didSubject>
+
+rootAuthorisationFromAccreditation: tir getRootAuthorisation user.accreditationUrl
+reservedAttributeId: compute randomID
+payloadVcTI: load assets/vcdm2.0/VerifiableAccreditationToAttest.json
+set payloadVcTI.issuer user.did
+set payloadVcTI.credentialSubject.id $1
+set payloadVcTI.credentialSubject.permissionFor.0.schemaId tsrUrl /schemas/zB5yLy7GXdZs1iaJ7wN2K5mhwZDTxjECM2fELYE73mu3E
+set payloadVcTI.termsOfUse.parentAccreditation user.accreditationUrl
+set payloadVcTI.termsOfUse.rootAuthorisation rootAuthorisationFromAccreditation
+set payloadVcTI.credentialSchema.id tsrUrl /schemas/z2DzoeZrgduRwk3y4RAetwSHRZAHAqNF6fWWMaEcZUdAY
+set payloadVcTI.credentialStatus.id tirUrl /issuers/ $1 /attributes/ reservedAttributeId
+set payloadVcTI.credentialSubject.reservedAttributeId reservedAttributeId
+compute createVcJwt payloadVcTI {} ES256 2.0

package/dist/scripts/vcdm2.0/issueVcTnl

@@ -0,0 +1,34 @@
+payloadVcTnl: load assets/vcdm2.0/TrustedNodesList.json
+set payloadVcTnl.credentialSubject.id SET_SERVICE_OPS_MANAGER
+
+# environment: test, pilot, preprod, or prod
+set payloadVcTnl.credentialSubject.environment SET_ENV
+
+# chainId
+# test: 6175
+# pilot: 6179
+set payloadVcTnl.credentialSubject.chainId SET_CHAIN_ID
+
+# version
+set payloadVcTnl.credentialSubject.version SET_TNL_VERSION
+
+# Load nodes
+nodes: load assets/Nodes.json
+
+# Check the status
+resultHealth: tnl healthNodes nodes
+nodesTotal: compute length resultHealth.nodesOk
+set payloadVcTnl.credentialSubject.nodesTotal nodesTotal
+set payloadVcTnl.credentialSubject.nodes resultHealth.nodesOk
+
+# Other updates
+rootAuthorisationFromAccreditation: tir getRootAuthorisation user.accreditationUrl
+set payloadVcTnl.termsOfUse.parentAccreditation user.accreditationUrl
+set payloadVcTnl.termsOfUse.rootAuthorisation rootAuthorisationFromAccreditation
+set payloadVcTnl.credentialSchema.id ebsi: payloadVcTnl.credentialSubject.environment :trusted-schemas-registry:/schemas/zB5yLy7GXdZs1iaJ7wN2K5mhwZDTxjECM2fELYE73mu3E
+
+# Issue the credential
+vcTnl: compute createVcJwt payloadVcTnl {} ES256 2.0
+
+view resultHealth
+# pass the VC to the Service Ops Manager (see verifyVcTnl)

package/dist/scripts/vcdm2.0/registerDidDocument

@@ -0,0 +1,15 @@
+# register first part of DID document
+resAuthDIDRInvite: authorisation auth didr_invite_presentation ES256 $1 2.0
+using token resAuthDIDRInvite.access_token
+
+did insertDidDocument
+compute wait 5
+
+# complete DID document
+resAuthDIDRWrite: authorisation auth didr_write_presentation ES256K [] 2.0
+using token resAuthDIDRWrite.access_token
+
+did addVerificationMethod user.did ES256
+compute wait 5
+did addVerificationRelationship user.did authentication ES256
+did addVerificationRelationship user.did assertionMethod ES256

package/dist/scripts/vcdm2.0/updateVcRootTAO

@@ -0,0 +1,13 @@
+# way of use:
+# ==> run issueVcRootTAO <didSubject> <trustFramework> <policyId> <legalBasis> <reservedAttributeId>
+
+payloadVcRootTAO: load assets/vcdm2.0/VerifiableAuthorisationForTrustChain.json
+set payloadVcRootTAO.issuer user.did
+set payloadVcRootTAO.credentialSubject.id $1
+set payloadVcRootTAO.termsOfUse.trustFramework $2
+set payloadVcRootTAO.termsOfUse.policyId $3
+set payloadVcRootTAO.termsOfUse.legalBasis $4
+set payloadVcRootTAO.credentialSchema.id tsrUrl /schemas/zB5yLy7GXdZs1iaJ7wN2K5mhwZDTxjECM2fELYE73mu3E
+set payloadVcRootTAO.credentialStatus.id tirUrl /issuers/ $1 /attributes/ $5
+set payloadVcRootTAO.credentialSubject.reservedAttributeId $5
+compute createVcJwt payloadVcRootTAO {} ES256 2.0

package/dist/scripts/vcdm2.0/updateVcTAO

@@ -0,0 +1,14 @@
+# way of use:
+# ==> run issueVcTAO <didSubject> <reservedAttributeId>
+
+rootAuthorisationFromAccreditation: tir getRootAuthorisation user.accreditationUrl
+payloadVcTAO: load assets/vcdm2.0/VerifiableAccreditationToAccredit.json
+set payloadVcTAO.issuer user.did
+set payloadVcTAO.credentialSubject.id $1
+set payloadVcTAO.credentialSubject.permissionFor.0.schemaId tsrUrl /schemas/zB5yLy7GXdZs1iaJ7wN2K5mhwZDTxjECM2fELYE73mu3E
+set payloadVcTAO.termsOfUse.0.parentAccreditation user.accreditationUrl
+set payloadVcTAO.termsOfUse.0.rootAuthorisation rootAuthorisationFromAccreditation
+set payloadVcTAO.credentialSchema.id tsrUrl /schemas/z2DzoeZrgduRwk3y4RAetwSHRZAHAqNF6fWWMaEcZUdAY
+set payloadVcTAO.credentialStatus.id tirUrl /issuers/ $1 /attributes/ $2
+set payloadVcTAO.credentialSubject.reservedAttributeId $2
+compute createVcJwt payloadVcTAO {} ES256 2.0

package/dist/scripts/vcdm2.0/updateVcTI

@@ -0,0 +1,14 @@
+# way of use:
+# ==> run issueVcTI <didSubject> <reservedAttributeId>
+
+rootAuthorisationFromAccreditation: tir getRootAuthorisation user.accreditationUrl
+payloadVcTI: load assets/vcdm2.0/VerifiableAccreditationToAttest.json
+set payloadVcTI.issuer user.did
+set payloadVcTI.credentialSubject.id $1
+set payloadVcTI.credentialSubject.permissionFor.0.schemaId tsrUrl /schemas/zB5yLy7GXdZs1iaJ7wN2K5mhwZDTxjECM2fELYE73mu3E
+set payloadVcTI.termsOfUse.parentAccreditation user.accreditationUrl
+set payloadVcTI.termsOfUse.rootAuthorisation rootAuthorisationFromAccreditation
+set payloadVcTI.credentialSchema.id tsrUrl /schemas/z2DzoeZrgduRwk3y4RAetwSHRZAHAqNF6fWWMaEcZUdAY
+set payloadVcTI.credentialStatus.id tirUrl /issuers/ $1 /attributes/ $2
+set payloadVcTI.credentialSubject.reservedAttributeId $2
+compute createVcJwt payloadVcTI {} ES256 2.0

package/dist/scripts/vcdm2.0/verifyVcTnl

@@ -0,0 +1,10 @@
+# the Service Ops Manager loads his user, verifies the
+# credential and creates a VP with a generic audience
+
+set jwtPayload {"aud":"any"}
+set jwtPayload.exp # undefined: no expiration
+vpTnl: compute createVpJwt vcTnl {} jwtPayload ES256 2.0
+
+# verify VC and VP
+compute verifyVcJwt vcTnl
+compute verifyVpJwt vpTnl any

package/dist/scripts/verifyVcTnl

@@ -0,0 +1,10 @@
+# the Service Ops Manager loads his user, verifies the
+# credential and creates a VP with a generic audience
+
+set jwtPayload {"aud":"any"}
+set jwtPayload.exp # undefined: no expiration
+vpTnl: compute createVpJwt vcTnl {} jwtPayload ES256 1.1
+
+# verify VC and VP
+compute verifyVcJwt vcTnl
+compute verifyVpJwt vpTnl any

package/dist/scripts/wct/accreditAndAuthorize

@@ -0,0 +1,133 @@
+# create new issuer
+using user null
+using user
+using user ES256 did1 user.keys.ES256K.privateKeyHex
+
+# request credential to onboard
+vcOnboard: conformance getCredential onboard ES256 1.1
+conformance check ti_request_verifiable_authorisation_to_onboard
+
+set myIssuer user
+
+# get the did of conformance api
+vcOnboardDecoded: compute decodeJWT vcOnboard.vc
+set conformanceApiDid vcOnboardDecoded.payload.iss
+
+# register did document
+run registerDidDocument vcOnboard.vc
+conformance check ti_register_did
+
+# request VerifiableAccreditationToAttest (TI)
+vcTI: conformance getCredential ti
+conformance check ti_request_verifiable_accreditation_to_attest
+
+# register the credential for TI
+t: authorisation auth tir_invite_presentation ES256 vcTI.vc 1.1
+using token t.access_token
+tir setAttributeData myIssuer.did vcTI.reservedAttributeId vcTI.vc
+set vcTI.url tirUrl /issuers/ myIssuer.did /attributes/ vcTI.reservedAttributeId
+conformance check ti_register_verifiable_accreditation_to_attest
+
+# create a proxy
+conformance clientMockUpdateList "1" "0" "0"
+t: authorisation auth tir_write_presentation ES256
+using token t.access_token
+set proxyData {"prefix":"","headers":{},"testSuffix":"/credentials/status/1"}
+set proxyData.prefix myIssuer.clientId
+tir addIssuerProxy myIssuer.did proxyData
+proxies: tir get /issuers/ myIssuer.did /proxies
+set user.proxyId proxies.items.0.proxyId
+set user.accreditationUrl vcTI.url
+conformance clientMockInitiate
+
+# issue CTRevocable with credentialStatus StatusList2021
+conformance check ti_request_ctrevocable
+
+# Validate the issued credential details
+conformance check ti_validate_ctrevocable
+
+# revoke credential
+statusListIndex: compute statusListIndex conformanceApiDid
+conformance clientMockUpdateList 1 statusListIndex 1
+conformance check ti_revoke_ctrevocable
+
+# create a proxy for bitstring
+conformance clientMockUpdateBitstringList "1" "0" "0"
+t: authorisation auth tir_write_presentation ES256
+using token t.access_token
+set proxyData {"prefix":"","headers":{},"testSuffix":"/credentials/bitstring-status/1"}
+set proxyData.prefix myIssuer.clientId
+tir addIssuerProxy myIssuer.did proxyData
+proxies: tir get /issuers/ myIssuer.did /proxies
+set user.proxyId proxies.items.1.proxyId
+set user.accreditationUrl vcTI.url
+conformance clientMockInitiate
+
+# issue CTRevocable with credentialStatus bitstring
+conformance check ti_request_bitstring_ctrevocable
+
+# Validate the issued credential details
+conformance check ti_validate_bitstring_ctrevocable
+
+# revoke credential
+statusListIndex: compute statusListIndex conformanceApiDid
+conformance clientMockUpdateBitstringList 1 statusListIndex 1
+conformance check ti_revoke_bitstring_ctrevocable
+
+# request VerifiableAccreditationToAccredit (TAO)
+vcTAO: conformance getCredential tao
+conformance check tao_request_verifiable_accreditation_to_accredit
+
+# register the credential for TAO
+t: authorisation auth tir_write_presentation ES256
+using token t.access_token
+tir setAttributeData myIssuer.did vcTAO.reservedAttributeId vcTAO.vc
+set vcTAO.url tirUrl /issuers/ myIssuer.did /attributes/ vcTAO.reservedAttributeId
+set user.accreditationUrl vcTAO.url
+conformance clientMockInitiate
+conformance check tao_register_verifiable_accreditation_to_accredit
+
+# request credential to onboard sub-account
+conformance check tao_request_verifiable_authorisation_to_onboard_subaccount
+
+# validate credential and register sub-account
+conformance check tao_validate_verifiable_authorisation_to_onboard_subaccount
+
+# request VerifiableAccreditationToAttest for sub-account (TI)
+conformance check tao_request_verifiable_accreditation_to_attest_subaccount
+
+# validate and register credential for sub-account
+conformance check tao_validate_verifiable_accreditation_to_attest_subaccount
+
+# request VerifiableAccreditationToAccredit for sub-account (TAO)
+conformance check tao_request_verifiable_accreditation_to_accredit_subaccount
+
+# validate and register credential for sub-account
+conformance check tao_validate_verifiable_accreditation_to_accredit_subaccount
+
+# revoke credentials issued to subaccount
+subaccount: compute subaccountDid myIssuer.did
+attributes: tir get /issuers/ subaccount /attributes
+t: authorisation auth tir_write_presentation ES256
+using token t.access_token
+tir setAttributeMetadata subaccount attributes.items.0.id revoked myIssuer.did vcTAO.reservedAttributeId
+tir setAttributeMetadata subaccount attributes.items.1.id revoked myIssuer.did vcTAO.reservedAttributeId
+conformance check tao_revoke_rights_subaccount
+
+# request VerifiableAuthorisationForTrustChain (Root TAO)
+vcRootTAO: conformance getCredential roottao ES256 1.1 vcOnboard.vc
+conformance check rtao_request_verifiableauthorisationfortrustchain
+
+# register the credential for RootTAO
+t: authorisation auth tir_write_presentation ES256
+using token t.access_token
+tir setAttributeData myIssuer.did vcRootTAO.reservedAttributeId vcRootTAO.vc
+conformance check rtao_register_verifiableauthorisationfortrustchain
+
+
+# request CTAAQualificationCredential
+compute wait 10
+ctaaQualification: conformance getCredential qualification
+conformance check request_ctaaqualificationcredential
+
+# ACCREDIT AND AUTHORIZE TESTS FINISHED!!

package/dist/scripts/wct/accreditAndAuthorize2

@@ -0,0 +1,89 @@
+# create new issuer
+using user null
+using user
+using user ES256 did1 user.keys.ES256K.privateKeyHex
+
+# request credential to onboard
+vcOnboard: conformance getCredential onboard ES256 2.0
+conformance check ti_request_verifiable_authorisation_to_onboard
+
+set myIssuer user
+
+# register did document
+run vcdm2.0/registerDidDocument vcOnboard.vc
+conformance check ti_register_did
+
+# request VerifiableAccreditationToAttest (TI)
+vcTI: conformance getCredential ti ES256 2.0
+conformance check ti_request_verifiable_accreditation_to_attest
+
+# register the credential for TI
+t: authorisation auth tir_invite_presentation ES256 vcTI.vc 2.0
+using token t.access_token
+tir setAttributeData myIssuer.did vcTI.reservedAttributeId vcTI.vc
+set vcTI.url tirUrl /issuers/ myIssuer.did /attributes/ vcTI.reservedAttributeId
+conformance check ti_register_verifiable_accreditation_to_attest
+
+# create a proxy
+conformance clientMockUpdateList 1 0 0
+t: authorisation auth tir_write_presentation ES256 [] 2.0
+using token t.access_token
+set proxyData {"prefix":"","headers":{},"testSuffix":"/credentials/status/1"}
+set proxyData.prefix myIssuer.clientId
+tir addIssuerProxy myIssuer.did proxyData
+proxies: tir get /issuers/ myIssuer.did /proxies
+set user.proxyId proxies.items.0.proxyId
+set user.accreditationUrl vcTI.url
+conformance clientMockInitiate
+
+# request VerifiableAccreditationToAccredit (TAO)
+vcTAO: conformance getCredential tao ES256 2.0
+conformance check tao_request_verifiable_accreditation_to_accredit
+
+# register the credential for TAO
+t: authorisation auth tir_write_presentation ES256 [] 2.0
+using token t.access_token
+tir setAttributeData myIssuer.did vcTAO.reservedAttributeId vcTAO.vc
+set vcTAO.url tirUrl /issuers/ myIssuer.did /attributes/ vcTAO.reservedAttributeId
+set user.accreditationUrl vcTAO.url
+conformance clientMockInitiate
+conformance check tao_register_verifiable_accreditation_to_accredit 2.0
+
+# request credential to onboard sub-account
+conformance check tao_request_verifiable_authorisation_to_onboard_subaccount 2.0
+
+# validate credential and register sub-account
+conformance check tao_validate_verifiable_authorisation_to_onboard_subaccount 2.0
+
+# request VerifiableAccreditationToAttest for sub-account (TI)
+conformance check tao_request_verifiable_accreditation_to_attest_subaccount 2.0
+
+# validate and register credential for sub-account
+conformance check tao_validate_verifiable_accreditation_to_attest_subaccount 2.0
+
+# request VerifiableAccreditationToAccredit for sub-account (TAO)
+conformance check tao_request_verifiable_accreditation_to_accredit_subaccount 2.0
+
+# validate and register credential for sub-account
+conformance check tao_validate_verifiable_accreditation_to_accredit_subaccount 2.0
+
+# revoke credentials issued to subaccount
+subaccount: compute subaccountDid myIssuer.did
+attributes: tir get /issuers/ subaccount /attributes
+t: authorisation auth tir_write_presentation ES256 [] 2.0
+using token t.access_token
+tir setAttributeMetadata subaccount attributes.items.0.id revoked myIssuer.did vcTAO.reservedAttributeId
+tir setAttributeMetadata subaccount attributes.items.1.id revoked myIssuer.did vcTAO.reservedAttributeId
+conformance check tao_revoke_rights_subaccount 2.0
+
+# request VerifiableAuthorisationForTrustChain (Root TAO)
+vcRootTAO: conformance getCredential roottao ES256 2.0 vcOnboard.vc
+conformance check rtao_request_verifiableauthorisationfortrustchain 2.0
+
+# register the credential for RootTAO
+t: authorisation auth tir_write_presentation ES256 [] 2.0
+using token t.access_token
+tir setAttributeData myIssuer.did vcRootTAO.reservedAttributeId vcRootTAO.vc
+conformance check rtao_register_verifiableauthorisationfortrustchain 2.0
+
+# ACCREDIT AND AUTHORIZE TESTS FINISHED FOR VCDM 2.0!!